Plugins 〉Splunk

Data Source
grafana
Enterprise

Splunk

Instantly visualize Splunk data in Grafana

The Splunk data source plugin is the easiest way to pull Splunk data directly into Grafana dashboards.

  • Visualize it either in isolation (one database) or blend it with other data sources.
  • Discover correlations and covariances across all your data in minutes.

Installing Splunk on Grafana Cloud:

For more information, visit the docs on plugin installation.

Change Log

[3.0.2] - 2022-04-20

  • Handle null namespace values

[3.0.1] - 2022-03-29

  • New builds with go 1.18 to address CVE-2022-24921

[3.0.0] - 2021-01-18

  • Minimum supported Grafana version is now set to v8.2.0
  • Support sample ratio in explore view URLs
  • Fixes an issue with data link support in dashboard panels

[2.2.3] - 2021-12-17

  • Enterprise licence check update

[2.2.2] - 2021-12-14

  • Values for template variables can now be numbers.

[2.2.1] - 2021-11-23

  • Fixed an issue with escaping wildcards in queries with template variables
  • Fixed an issue with applying defaults for Preview Mode and event sampling

[2.2.0] - 2021-11-01

  • Added support for multi-value fields
  • Added support for event sampling
  • Added support for nagivating from Promethues metrics to Splunk logs in Explore
  • Renamed Stream Mode to Preview Mode
  • Fixed an issue with Preview Mode that prevented the display of partial results
  • Prevent internal field filters from being applied to dashboard variable queries
  • Improved query processing performance by 38 percent and reduced memory usage by 50 percent
  • Fixed invalid output in mstats queries

[2.1.7] - 2021-09-08

  • Fixed issue that would filter internal fields even if internal field filteration was disabled

[2.1.6] - 2021-08-04

  • Documentation update

[2.1.5] - 2021-07-30

  • Fixed issue where alerting queries don't filter out internal fields
  • Results that return data in multiple different types are typed as string

[2.1.4] - 2021-06-02

Bug Fixes

  • #278: 'No data' displayed for Grafana 8

[2.1.3] - 2021-05-27

Bug Fixes

  • #265: Errors returned when in polling mode cause the driver to crash
  • #226: Filter fields prefixed with _ if filtration is on

[2.1.2] - 2021-4-12

  • Chore: Update SDK

[2.1.1] - 2020-04-06

Bug Fixes

  • #254: To template variables propery, splunk should be passing in scopedvars into the templating engine
  • #224: Splunk executes queries that have hide = true (the eye icon)
  • #222: Get the splunk changelog to publish to GCOM by upgrading to the "next" toolkit"
  • #246: Splunk should not refresh the query immediately after every pause in typing/editing the query
  • #239: Enable E2E tests
  • #215: "Skip TLS Verify" option not working
  • #213: "Post forbidden" error after upgrading to 2.0.4
  • #208: Update to new SDK to support individual plugin licensing

[2.1.0] - 2020-01-25

Bug fixes

  • #212: Return all indexes
  • #235: Better handle edge cases
  • #236: Better handle an out-of-bounds error

Enhancements

  • #187: Update README
  • #210: Link from logs to traces using data links or derived fields

Known issues

  • You must use // around regular expressions in the datalinks configuration or any plugin health check will fail. When a regular expression is optional, use an empty //.

[2.0.5] - 2020-12-11

Bug fixes

  • #214: Time filters not working for Splunk queries in dashboard variables
  • #210,#209: Plugin crashes a lot while trying out queries

[2.0.4] - 2020-10-27

  • Fix: If session key is empty, still valid
  • Enhancement: When using splunk in clustered mode, allow user to revert to 'basic auth'

[2.0.3] - 2020-10-19

  • Fix for proxy settings, now will recognize standard "http_proxy" "https_proxy" and "no_proxy" environment variables
  • TLS Skip Verification now performs verification when not checked

[2.0.2] - 2020-09-10

  • Fix for time range issue #184

[2.0.1] - 2020-06-01

Issues Resolved

  • Issues with timeseries/table processing #164
  • Needs to return raw logging as first frame #171

[2.0.0] - 2020-05-22

  • Rewritten as a backend plugin with native alerting support
  • Removed distinction between table & time_series results
  • Signed version for grafana 7.x

[1.5.0] - 2020-05-17

  • Signed release for Grafana 7.x

[1.4.1] - 2020-01-10

Fixed

  • "Unbalanced quotes" error when using variables in some scenarios
  • Logs panel does not show data in logs format
  • Query returns only first 100 points

[1.4.0] - 2019-11-26

Added

  • Explore logs integration

[1.3.4] - 2019-11-22

Fixed

  • Plugin failed with "Unexpected token <" error

[1.3.3] - 2019-11-21

Fixed

  • Query in template variable with no result data is running forever #82

[1.3.2] - 2019-10-03

Fixed

  • Plugin failed in Grafana 6.4 with error "Unexpected token <"

[1.3.1] - 2019-10-01

Fixed

  • Streaming support in Grafana 6.4 (incompatible with previous version)

[1.3.0] - 2019-07-30

Added

  • Variable query editor with namespace support, #63

Fixed

  • Streaming support in Grafana 6.3

[1.2.2] - 2019-06-29

Fixed

  • Bug with semicolon in query, #57
  • Variable expansion when concatenated with litteral string, #58
  • Variable expansion when there is a period character in the name, #59

[1.2.1] - 2019-03-18

Fixed

  • Query fails when search contains curly braces, #45
  • Unresponsive query field size in Grafana 6, #47

[1.2.0] - 2019-02-01

Added

  • Search editor with syntax highlighting, #33
  • Option for disabling internal fields filtration, #37

Fixed

  • Table panel is empty after update to v1.1.0, #34
  • Panel is not refreshing on leaving search field, #40

[1.1.0] - 2018-11-14

Added

  • Multi-value template variables support, #2
  • Use time range for variable queries if Refresh option set to On Time Range Change
  • Option for variables search mode in datasource config (fast/smart/verbose)

Fixed

  • Variable query returns only first value, #22
  • Grafana shows only first 100 points, #6
  • Use oneshot or async search for template variables query depending on datasource config

Related content